Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Fix a crash in firefox_addons #8227

Merged
merged 3 commits into from
Dec 27, 2023

Conversation

Smjert
Copy link
Member

@Smjert Smjert commented Dec 22, 2023

Add a return when the "addons" member in the extensions JSON is present but it's not an array, to avoid accessing uninitialized memory.

Also check that the "addons" member elements are all objects when trying to access its nested members.

Should fix #8226

directionless
directionless previously approved these changes Dec 22, 2023
Add a return when the "addons" member in the extensions JSON
is present but it's not an array,
to avoid accessing uninitialized memory.

Also check that the "addons" member elements are all objects
when trying to access its nested members.
directionless
directionless previously approved these changes Dec 22, 2023
directionless
directionless previously approved these changes Dec 22, 2023
@Smjert
Copy link
Member Author

Smjert commented Dec 22, 2023

/easycla

@Smjert
Copy link
Member Author

Smjert commented Dec 23, 2023

@seph found yet another. The joy of rapidjson. This error might be present in other unrelated code, after having a cursory look.
I'll open a new PR tomorrow for those cases (a bit late here).

@directionless directionless added this to the 5.11.0 milestone Dec 27, 2023
@Smjert Smjert merged commit f4a4993 into osquery:master Dec 27, 2023
16 checks passed
@Smjert Smjert deleted the stefano/fix/firefox-addons-crash branch December 27, 2023 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

osquery 5.10.2 segfault on macOS, maybe genFirefoxAddons
2 participants